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Top Stories 

• The U.S. Chemical Safety Board and the Occupational Safety and Health Administration 
are investigating a methyl mercaptan leak at a DuPont and Co. plant in LaPorte, Texas, that 
killed four workers and injured one November 15 - Reuters (See item 3) 

• A boil water advisory was issued for customers in Sussex Borough November 16 until 
November 21 following the restoration of water service after a November 13 water main 
break during construction work on Route 23 in which over 1 million gallons of water was 
lost. - New Jersey Herald (See item 19 ) 

• The Dickson County Sheriffs Office in Tennessee’s computer system was compromised 
by the CryptoWall ransomware in October after an employee clicked on a malicious 
advertisement that forced staff into paying $500 in digital currency in order to retrieve 
72,000 files - Softpedia (See item 26) 

• Eight people were injured and 40 Ohio University students in Athens, Ohio, were displaced 
after a major fire damaged 6 buildings that included university housing and shut off power 
to the affected area for several hours November 16. - Athens News (See item 40 ) 
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Energy Sector 



1. November 13, U.S. Attorney’s Office, Northern District of Ohio - (Ohio) Stow man 
charged with cyber crimes. Authorities unsealed a federal indictment November 13 
charging an Ohio man for attempting to install malware on the computer systems of 
Eaton Corporation while he was employed as a contracted financial analyst in May. 

The malicious code was discovered after the suspect disclosed its existence to a former 
coworker. 

Source: http://www.fbi.gov/cleveland/press-releases/2014/stow-man-charged-with- 
cyber-crimes 

2. November 13, Los Angeles Times - (West Virginia) Former Massey Energy chief 
executive indicted in 2010 mine explosion. A West Virginia grand jury charged the 
former chief executive of Massey Energy Co., November 12 for his role in conspiring 
to violate federal mine safety standards and impeding federal mine safety officials at 
the company’s Upper Big Branch mine following an April 2010 coal mine explosion 
that killed 29 people. 

Source: http://www.latimes.com/nation/nationnow/la-na-nn-massev-energy-don- 
blankenship- 20141 1 13-story.html 

[ Return to top ] 

Chemical Industry Sector 

3. November 16, Reuters - (Texas) Federal agencies to begin probe of DuPont Texas 
plant deaths. The U.S. Chemical Safety Board and the Occupational Safety and Health 
Administration are investigating following a methyl mercaptan leak at a DuPont and 
Co. plant in LaPorte, Texas, November 15 that killed four workers. A fifth employee 
was transported to an area hospital with injuries. 

Source: http://www.reuters.com/article/2014/ll/17/us-usa-chemicals-death- 
idUSKCN0J00XA20141117 

4. November 14, Joliet Herald News - (Illinois) Another chemical leak at Stepan plant. 
Crews worked November 14 to contain a vapor leak of sulfur trioxide from a railcar at 
the Stepan Company plant in Elwood which lasted about 13 hours. The November 14 
release and a November 13 leak from a separate railcar at the same facility are under 
investigation, while crews were scheduled to make repairs November 15. 

Source: http ://w w w .theherald-ne ws .com/20 14/11/1 4/another-chemical-leak-at- stepan - 
plant/ayvq04u/ 

T Return to top i 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

5. November 14, Detroit News - (National) Ford expands Ranger Takata air bag 
recall. Ford announced that it is expanding a previous recall of 25,000 model year 
2004-2005 Ranger vehicles to include both passenger and driver airbags manufactured 
by Takata. The airbag inflators can explode during deployment, sending metal 
fragments into the vehicle cabin. 

Source: http://www.detroitnews.com/storv/business/autos/ford/2014/ll/14/ford- 
expands-ranger-takata-air-bag-recall/19050797/ 

[ Return to top ] 



Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

6. November 14, Baltimore Sun - (New York; Maryland) Former owner of Empire 
Towers indicted in $7million fraud. The U.S. Securities and Exchange Commission 
filed a complaint November 14 against a Hampton Bays, New York man who owned 
the Empire Towers building in Glen Bumie, Maryland, for allegedly raising over $7 
million from investors by selling fraudulent, unregistered bonds. The SEC also charged 
the man’s investment advisor for allegedly participating in the scheme. 

Source: http://www.baltimoresun.com/news/maryland/anne-arundel/bs-md-aa-empire- 
towers-owner-indicted-20141 1 14-story.html 

For another story, see item 32 
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Transportation Systems Sector 

7. November 17, KNBC 4 Los Angeles - (California) “Dangerous Device” found in 
truck on 1-5, driver arrested Authorities shut down several lanes on Interstate 5 south 
near the Interstate 805 merger in Del Mar Heights for 4 hours November 16 while a 
bomb squad disposed of an explosive device after it was discovered in the vehicle of a 
drunken driver during a search and arrest. 

Source: http://www.nbclosangeles.com/news/california/Explosive-Device-Team- 
Blocking-I-5-Freeway-282865 111 .html 

8. November 16, Associated Press - (New Jersey) Bus, military vehicle crash injures 
several people. Several people were injured when a military vehicle collided with a 
New Jersey Transit Bus on northbound lanes of the New Jersey Turnpike near 
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Interchange 14 in Newark November 16. Authorities are investigating the accident. 
Source: http://www.nbc40.net/story/27399104/bus-militarv-vehicle-crash-iniures- 
several-people 

9. November 16, KP1X 5 San Francisco; San Francisco Bay City News - (California) 

Woman dies after being struck in hit- run collision on Highway 29 near Calistoga. 

A fatal hit-and-run collision killed one woman and forced the closure of State Highway 
29 in Napa County nearly 1 1 hours while authorities investigated a potential homicide. 
Source: http://sanfrancisco.cbslocal.com/2014/ll/16/fatal-hit-and-run-crash-closes- 
highway-29-near-calistoga/ 

10. November 14, Richmond Times-Dispatch - (Virginia) Driver seriously injured in 
state Route 288 cement mixer crash. The northbound lane of Route 288 near 
Chesterfield was shut down for approximately 4 hours November 14 after a cement 
truck overturned when a tire blew out. The driver suffered serious injuries and was 
transported to a local hospital. 

Source: http://www.timesdispatch.com/news/local/traffic/driver-seriously-iniured-in- 
state-route-cement-mixer-crash/article edf8 1 c45-35 1 3-577f-99ea-558S65b66d7e.html 

11. November 14, Associated Press - (California) Seattle-bound flight diverted after 
bird strike. An Alaska Airlines flight en route to Seattle from Oakland, California, 
returned to Oakland shortly after takeoff due to a bird strike November 14. The plane is 
being inspected and kept in Oakland. 

Source: http://mynorthwest.com/174/2644507/Seattlebound-flight-diverted-after-bird- 
strike 

12. November 14, Waco Tribune-Herald - (Texas) Northbound I-35E reopened after 
Waxahachie-area semi crash. Northbound lanes of Interstate 35 East near 
Waxahachie were closed for more than 8 hours after 2 jackknifed semi-trucks crashed 
near Ganaway Bridge November 14. 

Source: http://www.wacotrib.com/news/traffic/northbound-i— e-reopened-after- 
waxahachie-area-semi-crash/article cf08ab00-c859-5a0a-8179-dae848a47e0a.html 
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Food and Agriculture Sector 

13. November 15, Hanover Evening Sun - (Pennsylvania) Damage from Pa. sawmill fire 
hits $800K. Authorities are investigating the cause of a 2-alarm fire at a Menallen 
Township sawmill November 13 that resulted in a structure collapse and caused an 
estimated $800,000 in damage. The sawmill resumed most operations November 14. 
Source: http://www.firehouse.com/news/11775047/two-alarm-blaze-at-menallen- 
township-sawmill-costly 



14. November 15, U.S. Food and Drug Administration - (National) Lundberg Family 
Farms recalls Eco-Farmed and Organic Brown Rice Flour because of possible 
health risk. The U.S. Food and Drug Administration announced November 14 that 
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Lundberg Family Farms issued a recall for specific bags of its Eco-Farmed Brown Rice 
Flour and Organic Brown Rice Flour due to possible Salmonella contamination. The 
products were distributed in retail store bulk bins and 25-pound bulk bags between 
November 4 and November 12 in five States and via mail order. 

Source: http://www.fda.gov/Safety/Recalls/ucm423223.htm 

15. November 15, U.S. Department of Agriculture - (National) Pennsylvania firm recalls 
Pretzel Dog products due to misbranding and undeclared allergens. The Food 
Safety and Inspection Service announced November 15 that City Line Foods 
Manufacturing Co. recalled about 1,196,669 pounds of frozen pretzel hot dog products 
due to undeclared soy lecithin caused by misbranding. The products were shipped 
nationwide for retail distribution and fundraising. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2014/recall-Q79-20 14-release 



16. November 14, U.S. Food and Drug Administration - (National) Great American 
Appetizers, Inc. recalls Hyvee Mozzarella Cheese Sticks due to undeclared soy 
flour, yellow #5, and yellow #6. The U.S. Food and Drug Administration reported 
November 14 that Great American Appetizers, Inc. recalled 662 cases of HyVee 
Mozzarella Cheese Sticks due to undeclared soy flour, yellow #5, and yellow #6. The 
products were sold in 8-ounce cartons and distributed to retailers in several States. 
Source: http://www.fda.gov/Safety/Recalls/ucm423211.htm 

17. November 14, U.S. Food and Drug Administration - (National) B&G Foods issues 
allergy alert on undeclared peanut and almond in product. The U.S. Food and Drug 
Administration reported that B&G Foods announced November 14 a recall for certain 
Ortega and Las Palmas-branded taco season, sauce, and kit products after a third party 
supplier informed the company that one or more of the ingredients used in the affected 
items contain peanuts and almonds that were not declared. The products were 
distributed to retailers and foodservice outlets nationwide. 

Source: http ://ww w .fda. go v/S afety/Recalls/ucm4232 1 6 .him 

18. November 14, U.S. Department of Agriculture - (National) Illinois firm recalls 
pierogi products due to misbranding and undeclared allergens. The Food Safety 
and Inspection Service announced November 14 that Kasia’s Deli Inc. issued a recall 
for about 2,059 pounds of Polana pierogi products due to undeclared wheat, soy, eggs, 
and milk caused by misbranding. The affected products were produced before 
September 19 and distributed nationwide via online sales. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archi ve/archive/20 1 4/recall-07 8-20 1 4-release 
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Water and Wastewater Systems Sector 

19. November 16, New Jersey Herald - (New Jersey) Customers in Sussex advised to 
continue boiling water. A boil water advisory was issued for customers in Sussex 
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Borough November 16 until November 21 following the restoration of water service 
after a November 13 water main break during construction work on Route 23. The 
water system lost over 1 million gallons of water due to the break and crews continue 
work to bring the borough’s upper water tank to full capacity. 

Source: http://www.niherald.com/storv/27399965/customers-in-sussex-advised-to- 
continue-boiling-water 

20. November 16, Wilkes-Barre Times Leader - (Pennsylvania) Pennsylvania American 
Water lifts boil advisory. A boil water advisory was lifted for Pennsylvania American 
Water customers in Luzerne, Swoyersville, Pringle, and West Wyoming November 16 
after acceptable bacteria test results were obtained from samples collected following 
the November 13 issuance of the advisory. 

Source: http://www.timesleader.com/news/local-news/50696554/Pennsylvania- 
American-Water-lifts-boil-advisory 



21. November 15, WTAJ 10 Altoona - (Pennsylvania) Boil water advisory in effect. 
Officials issued a boil water advisory to residents in Driftwood Borough November 15 
until further notice because of the potential for bacteria contamination due to low 
pressure as a result of recent water leaks in the distribution system. 

Source: http://www.wearecentralpa.com/storv/d/story/boil-water-advisorv-in- 
effect/ 1 3046/L4Xdcx4sLU - Wq RK3 HOPU w A 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 

22. November 16, KGBT 4 Harlingen - (Texas) City trucks stolen, three ambulances 
burglarized in Weslaco. Authorities are searching for the suspects responsible for 
breaking into a public facilities building in Weslaco November 14 and stealing city 
trucks, tool parts and supplies from three ambulances. Police recovered the two trucks 
in separate locations. 

Source: http://www.vallevcentral.com/news/storv.aspx?id=l 123753 

23. November 14, KING 5 Seattle - (Washington) Seattle Public Schools security breach 
impacts thousands of students. Seattle Public Schools notified the parents of at least 
8,000 special education students November 13 of a November 1 1 security breach 
involving the private and personal information of their children including names, 
student identification numbers, and disabilities after a law firm retained by the district 
inadvertently sent the information to an individual involved in an ongoing case. 

Source: http://www.king5.com/story/news/local/seattle/2014/ll/14/seattle-public- 
schools-admits-to-security-breach-impacting-thousands-of-students/l 9012537/ 
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For another story, see item 36 
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Emergency Services Sector 

24. November 17, Charlotte Observer - (North Carolina) Richmond County prison 
searching for two escaped inmates who have ties to Rowan, McDowell counties. 
Correctional authorities are searching for two inmates who escaped from the Morrison 
Correctional minimum unit in Richmond County, North Carolina, by allegedly jumping 
over the fence November 16. 

Source: http://www.charlotteobserver.com/2014/ll/17/5321887/richmond-county- 
prison-searching.html 

25. November 15, San Francisco Bay City News - (California) 3 sheriff’s employees 
charged with smuggling cellphones, drugs into jail. A sheriffs deputy and two 
correctional officers at the San Mateo County Maguire Main Jail in Redwood City were 
arrested and charged November 13 for allegedly smuggling drugs and cellphones to a 
known gang member following an independent investigation. 

Source: http://www.nbcbavarea.com/news/local/3-Sheriffs-Employees-Charged-With- 
Smuggling-Cellphones-Drugs-Into-Jail-282768921.html 

26. November 14, Softpedia - (Tennessee) Sheriff’s office pays ransom to unlock files 
encrypted by CryptoWall. The sheriffs office in Dickson County, Tennessee, 
reported that its computer system was the victim of the CryptoWall ransomware in 
October after an employee clicked on a malicious advertisement placed on the Web site 
of a local radio station. The sheriff’s office was forced to pay about $500 in digital 
currency in order to retrieve 72,000 files that were encrypted by the ransom-demanding 
malware. 

Source: http://news.softpedia.com/news/Sheriff-s-Office-Pavs-Ransom-to-Unlock- 
Files-Encrvpted-bv-CrvptoWall-464962.shtml 

For additional stories, see items 22 and 36 
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Information Technology Sector 

27. November 17, Softpedia - (International) BusyBox devices compromised through 
Shellshock attack. Researchers with Trend Micro identified a new version of the 
Bashlite malware that identifies devices on an infected system’s network that use the 
BusyBox software for Linux, including routers, and can then attempt to compromise 
them using the Shellshock vulnerability. 

Source: http://news.softpedia.com/news/BusvBox-Devices-Compromised-Through- 
Shellshock-Attack-465087.shtml 

28. November 17, Softpedia - (International) Steam password stealer is stored on Google 
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Drive. A researcher with Panda Security analyzed and reported a piece of malware 
designed to steal passwords for the Steam gaming service that is being delivered from a 
Google Drive account. The account was still active when the researcher reported the 
malware November 16 and targets victims via a fraudulent link in Steam chat that 
downloads an executable file. 

Source: http://news.softpedia.com/news/Steam-Password-Stealer-Is-Stored-On-Google- 
Drive-465 107.shtml 



29. November 17, The Register - (International) WinShock PoC clocked: But DON’T 
PANIC... It’s no Heartbleed. Researchers released a proof-of-concept (PoC) exploit 
for a SChannel crypto library flaw that was patched the week of November 10 in a 
Microsoft patch release. The flaw can still be exploited in unpatched Windows Server 
2012, 2008 R2, and 2003 installations to run arbitrary code. 

Source: http://www.theregister.co.uk/2014/ll/17/ms schannel crypto poc/ 

30. November 17, The Register - (International) Attack reveals 81 percent of Tor users 
but admins call for calm. A paper released by researchers at the Indraprastha Institute 
of Information Technology outlined a traffic confirmation attack method that the 
researchers stated could be used to identify users of the Tor anonymity network in 81 
percent of cases if an attacker has sufficient resources. 

Source: 

http://www.theregister.co.uk/2014/ll/17/deanonymization techniques for tor and bit 
coin/ 



31. November 17, Securityweek - (International) Alleged creators of WireLurker 
malware arrested in China. Authorities in China arrested three individuals for 
allegedly creating and distributing the WireLurker malware targeting Mac OS X, iOS, 
and Windows devices and shut down the Web site used to distribute the malware. 
Source: http://www.securityweek.com/alleged-creators-wirelurker-malware-arrested- 
china 



32. November 17, Securityweek - (International) Majority of top 100 paid iOS, Android 
apps have hacked versions: Report. Arxan Technologies released their annual State 
of Mobile App Security report which found that there were cloned or repackaged 
versions of 97 percent of the top 100 paid Android apps and 87 percent for top 100 paid 
iOS apps, and that repackaged or cloned financial services apps existed for 95 percent 
of apps on Android and 70 percent in iOS, among other findings. 

Source: http://www.securitvweek.com/maioritv-top-100-paid-ios-android-apps-have- 
hacked-versions-report 

33. November 16, Softpedia - (International) New variant of Dofoil trojan emerges with 
strong evasion features. Fortinet researchers identified a new variant of the Dofoil 
botnet malware that contains several changes aimed at preventing the malware from 
being detected and analyzed. 

Source: http://news.softpedia.com/news/New-Variant-of-Dofoil-Trojan- 
Emerges-with-Strong-Evasion-Features-465050.shtml 
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34. November 15, Softpedia - (International) New encryption ransomware offers file 
decryption trial. Researchers at Webroot identified a new piece of encryption 
ransomware dubbed CoinVault that encrypts victims’ files using AES -25 6 encryption, 
demands a ransom, and offers a free trial of the decryption performed if a ransom is 
paid. 

Source: http://news.softpedia.com/news/New-Encrvption-Ransomware-Offers-File- 
Decryption-Trial-465027 .shtml 

35. November 14, Softpedia - (International) Google misses trojan SMS app in Play 
Store for more than a year. An SMS trojan named Thai Fun Content was identified 
by Malwarebytes researchers on the Google Play Store and was available for download 
for over 1 year. The app subscribes victims to a paid SMS service and charges victims 
$0.37 per day. 

Source: http://news.softpedia.com/news/Google-Misses-Troian-SMS- 
App-in-Play-Store-for-More-than-a- Year-465005, shtml 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

36. November 14, McDowell News - (North Carolina) Phone outage impacts 17,500 
customers. Around 17,500 residents, businesses, and public agencies were without 
landline and cell phone service for nearly 4 hours November 13 after a fiber optic line 
was severed on U.S. 70 west in Pleasant Gardens. Emergency 9-1-1 service calls were 
also impacted during the outage. 

Source: http://www.mcdowellnews.com/news/phone-outage-impacts- 
customers/article ee66dd52-6c41-l Ie4-b85d-b7d2a99636bc.html 
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Commercial Facilities Sector 

37. November 17, Dallas Morning News - (Texas) About two dozen residents displaced 
early Monday after a fire at an Irving apartment complex. A 2-alarm fire at the 
Shadows of Cottonwood Apartments in Irving November 17 displaced about 30 
residents and damaged 12 apartment units. The cause of the blaze is under 
investigation. 

Source: http://thescoopblog.dallasnews.eom/2014/l 1/about-two-dozen-residents- 
displaced-early-mondav-after-a-fire-at-an-irving-apartment-complex.html/ 
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38. November 17, Associated Press - (Ohio) Off-duty police officer fatally shot at Ohio 
pub. Police arrested and charged a suspect November 16 for allegedly opening fire 
inside Papa Don’s Pub in A kr on when he returned to the restaurant after being asked by 
management to leave due to his unruly behavior. An off-duty police officer was ki lled 
when he approached the suspect who brandished a gun and shot and injured 4 
additional patrons. 

Source: http://www.seattlepi.com/news/crime/article/Off-duty-police-officer-fatally- 
shot-at-0hio-pub-5897006.php 

39. November 16, KXTV 10 Sacramento - (California) Two-alarm strip mall fire ruled 
arson. A 2-alarm fire that broke out November 15 at a Sacramento County strip mall 
engulfed two structures and caused between $100,000 and $200,000 in damage. Arson 
investigators ruled the fire as incendiary in nature. 

Source: http://www.newsl0.net/story/news/local/arden-lariviera/2014/ll/15/two-alarm- 
sacramento-fire/1 90843 15/ 

40. November 16, Athens News - (Ohio) Blaze heavily damages block of uptown 
buildings. Authorities are investigating the cause of a November 16 fire that damaged 
6 businesses in Athens, Ohio, and injured 8 individuals, including 3 firefighters and 1 
police officer. At least 40 students were displaced from apartment units located above 
the affected businesses, and a subsequent power outage affected the area for several 
hours. 

Source: http://www.athensnews.com/ohio/article-43673-blaze-heavily-damages-block- 
of-upto wn-buildings .htrnl 

41. November 15, MyNorthwest.com - (Washington) Gas leak prompts evacuation at 
Lynnwood Costco. Hundreds of patrons and staff were evacuated from a Costco store 
in Lynwood November 15 after a refrigerant line ruptured and released a visible cloud 
of gas. One individual was transferred to an area hospital with injuries after he came in 
direct contact with the gas. 

Source: http://mvnorthwest.com/ll/2645018/Gas-leak-prompts-evacuation-at- 
Lynnwood-Costco 

42. November 14, Suffolk County Newsday - (New York) Water main break causes 9- 
hour closing of Merrick Road in Bellmore. About 20 commercial businesses in 
Nassau County were without water service for nearly 9 hours November 14 following a 
break in a 12 inch water main that flooded the area. 

Source: http://www.newsday.com/long-island/nassau/merrick-road-intersection-in- 
bellmore-closed-for-9-hours-due-to-water-main-break-cops-say- 1.96 17483 

For another story, see item 36 
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Dams Sector 



Nothing to report 
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